# data[].attributes.headline
                                                                                                          References

# data[].attributes.subject
                                                                                                          References

# data[].attributes.body
Capital Health NS. (2013, October 07)  Capital Health Ethics Support Privacy and Confidentiality.  Retrieved from https://youtu.be/t2SB6JtgPhM

Dolin, R. H., Goodrich, K., Kallem, C., Alschuler, L., & Holtz, P. (2014). Setting the STANDARD...EHR quality reporting rises in prominence due to meaningful use. Journal Of AHIMA, 85(1), 42-48.

Hoyt, R. E., Yoshihashi, A. & Bailey, N. (2014). Health informatics: Practical guide for  health care and information technology professionals (6th ed.). Bethesda, MD: AMIA.

# data[].attributes.headline
                                                                                            Flipgrid Discussion Questions

# data[].attributes.subject
                                                                                            Flipgrid Discussion Questions

# data[].attributes.body
After Reviewing the PowerPoint presentation, the video link and the information on this presentation, please answer one of the following questions:

1.  Why is the security and protection of healthcare information held in such high regard by healthcare providers and consumers:

2. Reflect on an incident in which protected healthcare information was compromised. What safeguards were in place and why did they fail to protect the information?  What type of security breach was this particular incident?

3.  Identify three forms of authentication and Identity management currently used in your practice environment. Which do you feel is the least effective? Which do you feel is the most effective? Why?

# data[].attributes.body
Local vs. SaaS security
*Many pros and cons to both technical
solutions
*Local solutions require the space, logistics,
human resources and funding for
equipment replacement costs.
*Local is costly and cumbersome, but
organization controls security and owns
data.
*Local security solution has a local human
factor, improving user satisfaction.
*SaaS or Cloud technical solution costs
less and requires no space or human
resources at the local organization.
*SaaS utilizes virtual security methods,
outside of the control of organization.
*Tech assistance is often remote and
interfaced via phone or chat.

Authentication/Identity Management
*Multiple forms used in healthcare
-Biometrics
-Smart Card technology
-Tokens
-Basic user name and password
-PIN numbers
-Barcode scanning
-Digital Signatures

Security Breaches/Attacks
*Physical or Logical Access (Internal attack)
*Accidental/Negligent Disclosure
*Intrusion (External) attack)

# data[].attributes.headline
                               Legislation

# data[].attributes.subject
                               Legislation

# data[].attributes.body
HIPPA (Health Insurance Portability and Accountability Act-1996)
*Foundation for privacy and security within healthcare
*Protects all health information in all forms of media
*Directed how patient information was used and made
available
*Healthcare organizations are required to enact
administrative, physical and technical safeguards
to ensure security
*Establishes consumer rights related to PHI
*Included two major rules covering privacy & security:
-American Recovery and Reinvestment Act
-HITECH Act

American Recovery and Reinvestment Act
*Economic stimulus package signed into law in 2009
*Increased domestic spending in healthcare and HIT
*Funded the meaningful use initiative

HITECH Act
*Health Information Technology for Economic and
Clinical Health (HITECH) Act
*Part of the American Recovery and Reinvestment Act
*Promoted the adoption and meaningful use of HIT.

Meaningful Use
*Incentive program launched by CMS
*Use of certified EHR technology in a meaningful
manner, ensuring that the certified EHR technology is
connected in a manner that provides for the electronic
exchange of health information to improve the quality
of care.  The participating provider must submit to the
Secretary of Health & Human Services (HHS)
information on quality of care and other measures.

# data[].attributes.attachment_link.title
Capital Health Ethics Support Privacy and Confidentiality

# data[].attributes.body
1.  Describe Privacy and Security measures that are part of HIPAA, HITECH Act, and Meaningful Use and how they fit into the national health IT strategy.
2. Recognize the importance data security and privacy as related to public perception, particularly in regards to data breach and loss.
3.  Identify the benefits and pitfalls of local vs. Software-as-a-service (SaaS) technical security solutions.
4.  Discuss multiple ways to ensure authentication.
5.  Compare and contrast digital signature and certificate based encryption.
6.  Enumerate different types of security breaches and their causes.
7. Discuss security standards and the laws intended to protect Health data.

# data[].attributes.body
Chapter 8
Health Information Privacy and Security